Route Origin Authorization

$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/073eb97d-e872-4ff0-ad8a-a334146b45e0.roa
File:                     073eb97d-e872-4ff0-ad8a-a334146b45e0.roa (raw, json)
Hash identifier:          bdXnqw1J0D0tu1rqFtEx9F2tqfYKIfIdIiIkG7rQgXk=
Subject key identifier:   38:FE:B2:38:B3:FA:73:1E:9F:8C:D8:DB:5B:AA:C8:4C:BB:66:77:78
Certificate issuer:       /CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
Certificate serial:       1BDF5B9FBAEFA400C4C6273CF2B4A97D92773784
Authority key identifier: 10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
Subject info access:      rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/073eb97d-e872-4ff0-ad8a-a334146b45e0.roa
Signing time:             Tue 10 Feb 2026 00:10:54 +0000
ROA not before:           Tue 10 Feb 2026 00:10:54 +0000
ROA not after:            Mon 11 May 2026 23:59:59 +0000
asID:                     16509
IP address blocks:        2600:1ff9:2000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl
                          rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/1ba302b8-8dab-491d-b9ed-d7c92d030d82.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/2a246947-2d62-4a6c-ba05-87187f0099b2.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Tue 03 Mar 2026 17:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:df:5b:9f:ba:ef:a4:00:c4:c6:27:3c:f2:b4:a9:7d:92:77:37:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7
        Validity
            Not Before: Feb 10 00:10:54 2026 GMT
            Not After : May 11 23:59:59 2026 GMT
        Subject: serialNumber=a7bd006eae7f12064b23763d8a07cb41517cc9b6f9d15ff3142162fb1579aa1a, CN=b25c970f-d813-445c-bfe2-62668518c87e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:97:ca:a1:2f:22:6b:cc:10:09:b0:78:8a:49:
                    85:0a:cd:9e:7b:fe:1c:02:ad:a2:f9:7d:92:70:d3:
                    4b:8e:65:48:1d:98:ca:e2:93:8f:75:ea:9c:ce:b9:
                    56:60:e8:b6:d8:ba:eb:95:0a:4b:68:75:51:e1:d4:
                    6f:ea:0c:ce:04:37:40:92:56:c2:73:d8:47:1e:00:
                    c4:dd:de:93:b7:82:c1:a9:00:f6:e2:c9:82:05:f0:
                    04:81:61:79:3c:90:e4:19:b8:02:99:37:87:08:e6:
                    30:eb:4c:34:b7:1b:5e:41:18:4b:3a:92:83:88:55:
                    c0:e6:27:7f:42:48:e8:50:f5:9f:f7:30:c7:7e:cc:
                    60:81:47:94:41:dc:d2:0c:f8:a1:8d:c6:b8:91:6a:
                    30:63:5b:21:a9:d2:0c:95:9f:e2:32:8f:58:ad:da:
                    42:ba:02:bf:12:88:23:59:00:dc:cc:5b:83:10:bc:
                    fe:57:63:ca:ea:c3:da:9d:3e:e4:ab:77:d9:93:9d:
                    e9:a6:e9:c8:a4:2f:82:b6:3c:26:af:ef:98:7a:04:
                    d6:65:5d:50:33:48:d6:69:2c:4f:0f:ee:06:25:d0:
                    57:01:ba:02:00:14:fd:a1:2d:62:8e:75:c2:6f:9f:
                    f1:cc:75:ee:a2:2a:1f:48:88:f9:fa:98:fe:10:a4:
                    09:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:FE:B2:38:B3:FA:73:1E:9F:8C:D8:DB:5B:AA:C8:4C:BB:66:77:78
            X509v3 Authority Key Identifier:
                keyid:10:5D:D7:8D:55:78:40:AB:43:5D:BD:15:21:20:8F:29:FA:49:3F:AE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/2a246947-2d62-4a6c-ba05-87187f0099b2/1ba302b8-8dab-491d-b9ed-d7c92d030d82/6ed88cad11feac77449f018d42be358eb37107dbe8cb71d0a7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/073eb97d-e872-4ff0-ad8a-a334146b45e0.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/20aa329b-fc52-4c61-bf53-09725c042942/_qx3RJ8BjUK-NY6zcQfb6Mtx0Kc.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2600:1ff9:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         c3:be:92:0a:34:45:21:61:86:cf:d6:40:d9:b0:6f:15:b1:c7:
         ba:ca:67:9b:e7:23:49:c1:bb:f1:7a:03:7d:a0:f2:da:c9:30:
         e2:3d:aa:10:f4:b8:81:88:35:da:8c:35:ac:d1:7d:ce:5a:b6:
         0c:4d:6e:d7:c1:2f:cc:71:1e:b0:fb:e1:5b:91:c6:8f:ef:58:
         31:2d:d9:39:16:6e:27:29:dd:03:f4:bf:9b:90:8a:93:3d:6a:
         2f:69:b8:12:a7:fd:9f:e3:ef:fc:f8:f4:c5:e5:3f:c0:db:9b:
         0c:53:72:bf:68:1d:39:6f:42:3a:96:25:86:1a:f9:d9:97:5a:
         d6:21:7c:e5:1a:cf:de:f2:b1:87:3b:6b:34:f3:14:f6:9a:7d:
         e1:9e:1e:37:42:5e:03:68:86:70:52:3d:86:9e:ab:2b:9d:a2:
         78:87:f7:ef:f5:3c:83:3f:c1:b8:1b:83:cd:d0:c5:dd:9a:0c:
         1b:89:bf:20:c7:d3:f3:ff:10:67:f5:91:f5:ee:2b:03:62:99:
         54:ff:d2:e4:8e:d2:52:5b:fb:59:3f:a2:db:05:5a:5a:a5:25:
         73:55:a5:ae:23:2c:8b:79:e6:18:7b:25:f4:33:16:b1:1e:1c:
         45:4c:dc:01:77:e9:3d:d8:a3:c5:5c:f2:83:69:32:f0:73:25:
         3f:dd:36:68
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Sun Mar 1 22:12:11 2026 by rpki-client